Important Update: Cohesity Products Knowledge Base Articles


All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.

How To Create and Configure A Discovery Case

Article: 100050112
Last Published: 2023-04-28
Ratings: 0 0
Product(s): Alta SaaS Protection

Description

 
This article will walk through the simple task of creating a Discovery Case.  Cases allow you to create secure containers for Discovery search results and can be exported for easy collection from your Veritas Alta SaaS Protection tenant. 

Step 1 -- Create a New Case

From the Veritas Alta SaaS Protection Admin Portal, select the Discovery tile then click ' Create a New Case'.
 
 

Step 2 -- Provide Case Name

Enter a Case Name. 
 
Suppress Legal Hold: adding a search to a case automatically places a hold on all the items in the search result set. Items will remain on hold until the case is deleted. To disable this functionality, check this option (it will turn green).  For more information on legal hold, see Understanding Legal Hold in Veritas Alta SaaS Protection.
 
The default case type is "Standard" and the recommended type (not shown).  These are the most efficient to produce quick results as they do not create any of the dashboard features that are provided with the Enhanced type.  With an Enhanced case, there is additional overhead with policy evaluation, therefore not as efficient.  However, it does create a dashboard view of the case statistics under the Analytics tab.   Enhanced cases should only be used when one of the following is required:
  • Case/search dashboards
  • Case browsing in the Content app
  • User holds
 
 
 

Step 3 -- Edit A Case

Optionally, there are different configurations that can be applied to the case based on needs.  To see those options, click the case from the list which will open its properties.
 
 
Details tab
Here you can edit the case name as well as provide an optional description.  If you make any changes, be sure to click 'Save' to apply changes before moving on.
 
 


Permissions Tab

Here you can determine who, in addition to yourself, will have permission to access the case. Permissions can be read-only, or read and modify. By default, you will have read and modify permissions to any case that you create.

To give permission to another user, click 'Assign permissions'.

 

 

User Holds

 
This tab will only be displayed under two conditions: 
      1. The type of case is Enhanced
      2. The option ' Suppress Legal Hold' has not been enabled

User Holds allow for placing holds on select custodians (users or groups), ensuring the preservation of any data in Veritas Alta SaaS Protection that is accessible to them. 


Note: Placing User Holds does NOT enter the items for the target users into the case.  It applies a hold - in the context of a case - to any data the custodian(s) can access, preventing any type of deletion from the archive.  For more information, see Understanding Legal Hold in Veritas Alta SaaS Protection.

 

To place a user hold for the case, click 'Add User Hold'.

 
Click 'Apply' to save the changes.
 
 
In each case, there are also two additional informational-only tabs: 
  1. Search History -- provides an audit history of all searches that have been added to the case.  
  2. Export History -- provides an audit history of all the times the case has been exported, as well as job status for any currently running exports of the case. 

Next Steps

Now that a case is created, you can add items to the case by performing a Discovery Search.  More information on this topic found here:   How To Perform Discovery Searches and Add Results to a Case.
 


 
 

Was this content helpful?